75f2450c9475b0adef291c84d08dd8ba99c011d2ee34caef0f34340ef4c6b4e6

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
06-04-2024 05:10

Target

FREAKIN/jre/bin/jfxwebkit.dll
Size

32.4MB
MD5

4d857a5fc9ca16d2a67872faccf85d9f
SHA1

eaeb632e526efa946e4db1b8cfa31de6a7b03219
SHA256

7ffa7423dda07499394b345e5ece2d54c8e19247e6e76c0e23b5bf1470ab0d7f
SHA512

8dbc8675ce2dace8d629c3fa66cf65704346ab829ae0b0a1d7b25be22783b7e73624ba70f6d67264d6ca1656d7590e3753a8df2227da45112c5bd4a5654089af
SSDEEP

393216:VJ8d7SMzwH5R2sdDcBwHHdI4DKRlDsqXCagQZhzvilh2Wlq7ODI:VJ8d7zzUesdDtevn

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1708	2044	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2140 wrote to memory of 2044	2140	rundll32.exe	28
PID 2140 wrote to memory of 2044	2140	rundll32.exe	28
PID 2140 wrote to memory of 2044	2140	rundll32.exe	28
PID 2140 wrote to memory of 2044	2140	rundll32.exe	28
PID 2140 wrote to memory of 2044	2140	rundll32.exe	28
PID 2140 wrote to memory of 2044	2140	rundll32.exe	28
PID 2140 wrote to memory of 2044	2140	rundll32.exe	28
PID 2044 wrote to memory of 1708	2044	rundll32.exe	29
PID 2044 wrote to memory of 1708	2044	rundll32.exe	29
PID 2044 wrote to memory of 1708	2044	rundll32.exe	29
PID 2044 wrote to memory of 1708	2044	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\FREAKIN\jre\bin\jfxwebkit.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2140
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\FREAKIN\jre\bin\jfxwebkit.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2044
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2044 -s 228
    3⤵
    - Program crash
    PID:1708